wa — safe WhatsApp automation runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 1 Nov 2026.
Safety-first WhatsApp tools: draft-gated sends, enforced rate limits, append-only audit.
We read the source, 23 h ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return filepath.Join(xdg.StateHome, "wa", resolvedProfileName, "audit.log"), nil
const q = storedMessageSelect + `WHERE chat_jid = ?
AND (? = '' OR ts < (SELECT ts FROM messages WHERE chat_jid = ? AND message_id = ?))
ORDER BY ts DESC
LIMIT ?
`
rows, err := s.db.QueryContext(ctx, q, chatJID, before, chatJID, before, limit)
<ssh-host>:<dokku-app>. SSH host can be a ~/.ssh/config alias, FQDN,
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.
WhatsApp tools: wa.me links, QR codes, share widgets, phone validation, API rate card & limits.
WhatsApp OTP and WhatsApp Business automation tools for AI assistants
WhatsApp MCP. SQLCipher-encrypted, scrubber-CI-gated, draft-and-confirm sends, voice transcription.
Push, email, SMS, in-app and journeys. 54 tools: reads and drafts; only test sends.
Safety-first MCP server for Discord with privacy-safe reads, audits, and reviewed administration
Manage WhatsApp, Telegram and MAX mailings: audiences, drafts, moderation and sending.
Send WhatsApp, SMS, email or voice to a business with the compliance gate enforced.
Answers built from our own checks of this server.